Static program analysis in an object-relational mapping framework

    公开(公告)号:US10331894B2

    公开(公告)日:2019-06-25

    申请号:US15500532

    申请日:2014-08-29

    Abstract: Example implementations relate to static program analysis. For example, an apparatus includes a processor to perform static program analysis on a set of processor executable instructions associated with an object-relational mapping (ORM) framework. The first set of processor executable instructions includes an object. The processor is also to generate a propagation path of the object based on an execution flow of the object. The propagation path includes a first node and a second node. The first node corresponds to a first ORM operation to store the object in a database. The second node corresponds to a second ORM operation to retrieve the object from the database. The second node is linked to the first node based on a common attribute of the object. In response to a determination that the propagation path includes a sink, the processor is to output a security risk warning.

    MODIFYING WEB PAGE CODE TO INCLUDE CODE TO PROTECT OUTPUT

    公开(公告)号:US20180336348A1

    公开(公告)日:2018-11-22

    申请号:US15559642

    申请日:2015-04-10

    Abstract: Examples disclosed herein relate to modifying a web page. In one example, in response to beginning execution of a process initiating generation of a web page of a web application at a server, a runtime agent is executed. In this example, the runtime agent modifies code of the web page to inject code to protect output of the web page. In the example, the process can be executed using the modified code to generate a modified web page.

Patent Agency Ranking